Encryption, without the jargon
Two ideas are all you need to understand how your information is protected.
Think of a sealed envelope
When Lyfewiz saves something sensitive, such as your allergies or a family member's emergency contact, it seals it inside a digital envelope first. Only the sealed version is stored. We cannot open that envelope, because the key that unseals it lives on your device, never on our servers.
The lock is called AES-256-GCM
AES is the encryption standard trusted by banks, hospitals and governments worldwide. Lyfewiz uses its strongest everyday form, AES-256, together with a built-in tamper check called GCM. In plain terms: the lock is exceptionally strong, and if anyone so much as nudged a sealed envelope, the app would know immediately.
What happens when you save something
1You enter a detail
You type it into the app, exactly as you would write it in a notebook.
2It is scrambled on your device
Before anything is sent, your device turns it into unreadable code using your own personal key.
3Only the scrambled version is stored
The unreadable version is what gets saved. Without your key it is meaningless, so a copy of it reveals nothing about you.
The key never leaves your trusted devices. That single fact is what makes the protection real: there is no master copy for anyone else to find, request or misuse.
How your information is protected today
We would rather be precise than vague about what is covered.
Sealed with your own key
Your health and care details, including conditions, allergies, blood type, Medicare and private health information, hospital preferences, advance care directives and care notes, plus the emergency contacts for the people you care for. These are encrypted on your device, and our servers can never read them.
Locked to your account
Everything else you store, such as bills, documents, tasks, family, pets, vehicles, travel, finances and diary entries, lives in private storage that only your account can reach. Uploaded files are kept privately too. These records are protected by strict account-level access rules rather than a device key.
Yours to control
Every device that can unlock your sealed records is one you approved, listed with a name you chose. You can review them, approve a new one, or revoke access at any time from Settings. Resetting your account removes your records permanently.
Questions people ask
You will find your approved devices and encryption status in Settings.